News for hackers. Stuff that matters.

A comment on Firefox to add Tor Browser anti-fingerprinting technique called letterboxing. Parent comment

Re:Firefox to add Tor Browser anti-fingerprinting technique ... by dymk on Thursday March 07, 2019 @01:45AM (#19326034)
There’s like a billion side channels to determine how big the screen is unless you just want to entirely break basic css. Which is a pretty unreasonable way to address this problem.
[ Parent | on HN ]
Re:Firefox to add Tor Browser anti-fingerprinting technique ... by oftenwrong on Thursday March 07, 2019 @05:41AM (#19327030)
I block CSS altogether on most sites with uMatrix, so I do not think it is that unreasonable.
[ Parent | on HN ]
Re:Firefox to add Tor Browser anti-fingerprinting technique ... by rocho on Thursday March 07, 2019 @06:09AM (#19327153)
Doesn't that make most sites unusable?
[ Parent | on HN ]
Re:Firefox to add Tor Browser anti-fingerprinting technique ... by oftenwrong on Thursday March 07, 2019 @07:20AM (#19327412)
Surprisingly, most sites are perfectly usable with CSS disabled. They end up looking a bit like "motherfucking website"[1], or what you see in a text-based web browser.

[1] https://motherfuckingwebsite.com/

[ Parent | on HN ]
Re:Firefox to add Tor Browser anti-fingerprinting technique ... by blattimwind on Thursday March 07, 2019 @07:24AM (#19327430)
Disabling both CSS and JS actually works around usability issues on a bunch of sites ¯\_(ツ)_/¯

It's like reader mode, except it works on more sites.

[ Parent | on HN ]
Re:Firefox to add Tor Browser anti-fingerprinting technique ... by def_true_false on Thursday March 07, 2019 @06:21AM (#19327195)
Wouldn't loading all external links right away (think background-image) solve this? How does the site exfiltrate the gathered information without javascript or tracking pixels?

Edit: Having a bunch of html buttons/links, showing a different to agents based on their resolution and waiting to see which ones they follow would break this, unless everyone crawls a lot of stuff they don't need. Pretending to be one of a few common sizes is probably a better solution.

[ Parent | on HN ]